Privacy Policy

1. Introduction

Mendwell ("we", "us", "our") is committed to handling personal data with care and transparency. This policy explains what information we collect, why we collect it, how it is used, and how you can manage or access your data.

We operate in Thailand and our practices are guided by the Personal Data Protection Act B.E. 2562 (PDPA) and, where applicable to participants based in Europe, the General Data Protection Regulation (GDPR).

If you have any questions about this policy, please contact us at [email protected].

2. Data We Collect

We collect personal data only when you provide it to us directly, or when it is generated by your use of our website. We do not collect sensitive personal data.

Information you provide:

• Name and email address (via our enquiry form)
• Phone number (optional, if provided)
• Message content submitted through our contact form
• Payment details (handled by third-party payment processors — we do not store card data)

Information collected automatically:

• Browser type, device type, and operating system
• Pages visited and time spent on the site
• Referring website (where you came from)
• IP address (anonymised where possible)
• Cookie identifiers (see our Cookie Policy)

Legal basis for processing:

• Consent — for optional analytics and marketing cookies
• Contract — for processing enquiries and programme enrolment
• Legitimate interest — for website analytics to improve our services

3. How We Use Your Data

We use the information we collect for the following purposes:

• Responding to your enquiries and confirming programme enrolment
• Sending programme-related information (schedules, materials, confirmations)
• Processing payments through third-party payment services
• Improving our website and session content based on aggregate usage patterns
• Complying with legal obligations

We do not sell, rent, or trade your personal data to third parties for marketing purposes. We do not send unsolicited marketing communications. If you enrol in a programme, we may send you relevant information about future sessions — you can opt out at any time by emailing [email protected].

4. Data Sharing

We may share your data with the following third parties where necessary:

• Payment processors — to complete transactions securely
• Analytics providers — anonymised data to understand site usage (e.g. Google Analytics)
• Email hosting providers — to store and transmit communications
• Legal authorities — where required by Thai law or court order

All third-party service providers are required to protect your data and may only use it for the specific purpose for which it was shared.

5. Data Protection & Retention

We take reasonable steps to protect your personal data from unauthorised access, disclosure, or loss. These include:

• Encrypted transmission of data via HTTPS
• Access controls limiting who can view personal data internally
• Regular review of our data handling practices

We retain personal data only as long as necessary for the purposes described in this policy or as required by law. Enquiry data is retained for up to 2 years. Enrolment data may be retained for up to 5 years for administrative and legal purposes. Analytics data is retained in aggregate and anonymised form.

6. Cookies

We use cookies to help our website function and to understand how it is used. For full details, including how to manage your cookie preferences, please see our Cookie Policy.

7. Your Rights

Subject to applicable law, you have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — request deletion of your data where we no longer have a lawful reason to hold it
• Data portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interest
• Withdrawal of consent — where processing is based on consent, you may withdraw at any time

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

If you are based in Thailand, you may also contact the Office of the Personal Data Protection Committee. If you are in the EU/EEA, you have the right to lodge a complaint with your local supervisory authority.

8. Children's Privacy

Our services are directed at adults (18 and over). We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected such data, please contact us and we will remove it promptly.

9. Third-Party Links

Our website may include links to external websites or resources. We are not responsible for the privacy practices of those sites and encourage you to review their policies before providing any personal information.

10. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or applicable law. We will post the updated version on this page with a revised date. Continued use of our website or services after an update constitutes acceptance of the revised policy.

11. Contact